1. CVE-Search
  2. CVE-2014-0373
ID CVE-2014-0373
Summary Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:jre:1.7.0:update45:*:*:*:*:*:*
    cpe:2.3:a:oracle:jre:1.7.0:update45:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jdk:1.5.0:update55:*:*:*:*:*:*
    cpe:2.3:a:oracle:jdk:1.5.0:update55:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jre:1.5.0:update55:*:*:*:*:*:*
    cpe:2.3:a:oracle:jre:1.5.0:update55:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jdk:1.6.0:update65:*:*:*:*:*:*
    cpe:2.3:a:oracle:jdk:1.6.0:update65:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jre:1.6.0:update65:*:*:*:*:*:*
    cpe:2.3:a:oracle:jre:1.6.0:update65:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 13-05-2022 - 14:57)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
  • rhsa
    id RHSA-2014:0026
  • rhsa
    id RHSA-2014:0027
  • rhsa
    id RHSA-2014:0030
  • rhsa
    id RHSA-2014:0097
  • rhsa
    id RHSA-2014:0134
  • rhsa
    id RHSA-2014:0135
  • rhsa
    id RHSA-2014:0136
  • rhsa
    id RHSA-2014:0414
rpms
  • java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5
  • java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el6_5
  • java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el6_5
  • java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el6_5
  • java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el6_5
  • java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el6_5
  • java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10
  • java-1.7.0-openjdk-debuginfo-1:1.7.0.51-2.4.4.1.el5_10
  • java-1.7.0-openjdk-demo-1:1.7.0.51-2.4.4.1.el5_10
  • java-1.7.0-openjdk-devel-1:1.7.0.51-2.4.4.1.el5_10
  • java-1.7.0-openjdk-javadoc-1:1.7.0.51-2.4.4.1.el5_10
  • java-1.7.0-openjdk-src-1:1.7.0.51-2.4.4.1.el5_10
  • java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el5_10
  • java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5
  • java-1.7.0-oracle-devel-1:1.7.0.51-1jpp.1.el5_10
  • java-1.7.0-oracle-devel-1:1.7.0.51-1jpp.1.el6_5
  • java-1.7.0-oracle-javafx-1:1.7.0.51-1jpp.1.el5_10
  • java-1.7.0-oracle-javafx-1:1.7.0.51-1jpp.1.el6_5
  • java-1.7.0-oracle-jdbc-1:1.7.0.51-1jpp.1.el5_10
  • java-1.7.0-oracle-jdbc-1:1.7.0.51-1jpp.1.el6_5
  • java-1.7.0-oracle-plugin-1:1.7.0.51-1jpp.1.el5_10
  • java-1.7.0-oracle-plugin-1:1.7.0.51-1jpp.1.el6_5
  • java-1.7.0-oracle-src-1:1.7.0.51-1jpp.1.el5_10
  • java-1.7.0-oracle-src-1:1.7.0.51-1jpp.1.el6_5
  • java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10
  • java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5
  • java-1.6.0-openjdk-debuginfo-1:1.6.0.0-3.1.13.1.el5_10
  • java-1.6.0-openjdk-debuginfo-1:1.6.0.0-3.1.13.1.el6_5
  • java-1.6.0-openjdk-demo-1:1.6.0.0-3.1.13.1.el5_10
  • java-1.6.0-openjdk-demo-1:1.6.0.0-3.1.13.1.el6_5
  • java-1.6.0-openjdk-devel-1:1.6.0.0-3.1.13.1.el5_10
  • java-1.6.0-openjdk-devel-1:1.6.0.0-3.1.13.1.el6_5
  • java-1.6.0-openjdk-javadoc-1:1.6.0.0-3.1.13.1.el5_10
  • java-1.6.0-openjdk-javadoc-1:1.6.0.0-3.1.13.1.el6_5
  • java-1.6.0-openjdk-src-1:1.6.0.0-3.1.13.1.el5_10
  • java-1.6.0-openjdk-src-1:1.6.0.0-3.1.13.1.el6_5
  • java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el5_10
  • java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5
  • java-1.7.0-ibm-demo-1:1.7.0.6.1-1jpp.1.el5_10
  • java-1.7.0-ibm-demo-1:1.7.0.6.1-1jpp.1.el6_5
  • java-1.7.0-ibm-devel-1:1.7.0.6.1-1jpp.1.el5_10
  • java-1.7.0-ibm-devel-1:1.7.0.6.1-1jpp.1.el6_5
  • java-1.7.0-ibm-jdbc-1:1.7.0.6.1-1jpp.1.el5_10
  • java-1.7.0-ibm-jdbc-1:1.7.0.6.1-1jpp.1.el6_5
  • java-1.7.0-ibm-plugin-1:1.7.0.6.1-1jpp.1.el5_10
  • java-1.7.0-ibm-plugin-1:1.7.0.6.1-1jpp.1.el6_5
  • java-1.7.0-ibm-src-1:1.7.0.6.1-1jpp.1.el5_10
  • java-1.7.0-ibm-src-1:1.7.0.6.1-1jpp.1.el6_5
  • java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el5_10
  • java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5
  • java-1.6.0-ibm-accessibility-1:1.6.0.15.1-1jpp.1.el5_10
  • java-1.6.0-ibm-demo-1:1.6.0.15.1-1jpp.1.el5_10
  • java-1.6.0-ibm-demo-1:1.6.0.15.1-1jpp.1.el6_5
  • java-1.6.0-ibm-devel-1:1.6.0.15.1-1jpp.1.el5_10
  • java-1.6.0-ibm-devel-1:1.6.0.15.1-1jpp.1.el6_5
  • java-1.6.0-ibm-javacomm-1:1.6.0.15.1-1jpp.1.el5_10
  • java-1.6.0-ibm-javacomm-1:1.6.0.15.1-1jpp.1.el6_5
  • java-1.6.0-ibm-jdbc-1:1.6.0.15.1-1jpp.1.el5_10
  • java-1.6.0-ibm-jdbc-1:1.6.0.15.1-1jpp.1.el6_5
  • java-1.6.0-ibm-plugin-1:1.6.0.15.1-1jpp.1.el5_10
  • java-1.6.0-ibm-plugin-1:1.6.0.15.1-1jpp.1.el6_5
  • java-1.6.0-ibm-src-1:1.6.0.15.1-1jpp.1.el5_10
  • java-1.6.0-ibm-src-1:1.6.0.15.1-1jpp.1.el6_5
  • java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el5_10
  • java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5
  • java-1.5.0-ibm-accessibility-1:1.5.0.16.5-1jpp.1.el5_10
  • java-1.5.0-ibm-demo-1:1.5.0.16.5-1jpp.1.el5_10
  • java-1.5.0-ibm-demo-1:1.5.0.16.5-1jpp.1.el6_5
  • java-1.5.0-ibm-devel-1:1.5.0.16.5-1jpp.1.el5_10
  • java-1.5.0-ibm-devel-1:1.5.0.16.5-1jpp.1.el6_5
  • java-1.5.0-ibm-javacomm-1:1.5.0.16.5-1jpp.1.el5_10
  • java-1.5.0-ibm-javacomm-1:1.5.0.16.5-1jpp.1.el6_5
  • java-1.5.0-ibm-jdbc-1:1.5.0.16.5-1jpp.1.el5_10
  • java-1.5.0-ibm-jdbc-1:1.5.0.16.5-1jpp.1.el6_5
  • java-1.5.0-ibm-plugin-1:1.5.0.16.5-1jpp.1.el5_10
  • java-1.5.0-ibm-plugin-1:1.5.0.16.5-1jpp.1.el6_5
  • java-1.5.0-ibm-src-1:1.5.0.16.5-1jpp.1.el5_10
  • java-1.5.0-ibm-src-1:1.5.0.16.5-1jpp.1.el6_5
  • java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5
  • java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10
  • java-1.6.0-sun-demo-1:1.6.0.75-1jpp.1.el6_5
  • java-1.6.0-sun-demo-1:1.6.0.75-1jpp.3.el5_10
  • java-1.6.0-sun-devel-1:1.6.0.75-1jpp.1.el6_5
  • java-1.6.0-sun-devel-1:1.6.0.75-1jpp.3.el5_10
  • java-1.6.0-sun-jdbc-1:1.6.0.75-1jpp.1.el6_5
  • java-1.6.0-sun-jdbc-1:1.6.0.75-1jpp.3.el5_10
  • java-1.6.0-sun-plugin-1:1.6.0.75-1jpp.1.el6_5
  • java-1.6.0-sun-plugin-1:1.6.0.75-1jpp.3.el5_10
  • java-1.6.0-sun-src-1:1.6.0.75-1jpp.1.el6_5
  • java-1.6.0-sun-src-1:1.6.0.75-1jpp.3.el5_10
  • java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0
  • java-1.7.1-ibm-demo-1:1.7.1.1.0-1jpp.2.el7_0
  • java-1.7.1-ibm-devel-1:1.7.1.1.0-1jpp.2.el7_0
  • java-1.7.1-ibm-jdbc-1:1.7.1.1.0-1jpp.2.el7_0
  • java-1.7.1-ibm-plugin-1:1.7.1.1.0-1jpp.2.el7_0
  • java-1.7.1-ibm-src-1:1.7.1.1.0-1jpp.2.el7_0
  • java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el5
  • java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6
  • java-1.6.0-ibm-devel-1:1.6.0.16.0-1jpp.1.el5
  • java-1.6.0-ibm-devel-1:1.6.0.16.0-1jpp.1.el6
refmap via4
bid
  • 64758
  • 64922
confirm
hp
  • HPSBUX02972
  • HPSBUX02973
  • SSRT101454
  • SSRT101455
misc http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/496c51673dec
sectrack 1029608
secunia
  • 56432
  • 56485
  • 56535
suse
  • SUSE-SU-2014:0246
  • SUSE-SU-2014:0266
  • SUSE-SU-2014:0451
  • openSUSE-SU-2014:0174
  • openSUSE-SU-2014:0177
  • openSUSE-SU-2014:0180
ubuntu
  • USN-2089-1
  • USN-2124-1
Last major update 13-05-2022 - 14:57
Published 15-01-2014 - 16:08
Last modified 13-05-2022 - 14:57
Back to Top